Zscaler Security Architect

About NationMind LLC:NationMind LLC is a technology consulting firm focused on software development and QA testing services. We help clients build reliable, scalable applications with a strong emphasis on automation, performance, and quality. Our team works across industries, delivering solutions that drive innovation and operational efficiency. We are currently hiring skilled professionals for Zscaler Security Architect to join our growing team. Zscaler Security ArchitectRemote Key Responsibilities:

• Design and implement enterprise-scale Zscaler architectures supporting Zero Trust principles.
• Lead ZIA and ZPA deployment, migration, and optimization initiatives across global environments.
• Define secure internet access, private application access, SaaS security, and cloud access strategies.
• Develop SASE and Zero Trust roadmaps aligned with business, security, compliance, and operational goals.
• Conduct current-state architecture assessments and identify opportunities for modernization and risk reduction.
• Design secure access solutions for cloud, on-premise, hybrid, and remote workforce environments.
• Integrate Zscaler solutions with Identity Providers such as Microsoft Entra ID / Azure AD, Okta, Ping Identity, and other IAM platforms.
• Implement application segmentation strategies using ZPA and Zero Trust access policies.
• Design and govern URL filtering, CASB, Cloud Firewall, DLP, SSL inspection, sandboxing, and data protection policies.
• Support network transformation programs replacing or reducing dependency on traditional VPN architectures.
• Collaborate with network, cloud, IAM, endpoint, SOC, and GRC teams to implement effective security controls.
• Lead troubleshooting and remediation of complex Zscaler, traffic steering, authentication, and policy-related issues.
• Develop architecture standards, reference designs, HLDs, LLDs, migration plans, runbooks, and operational handover documents.
• Provide governance, risk, control, and compliance guidance related to Zscaler implementations.
• Mentor engineering teams and provide technical leadership for project delivery and managed services transition.

 Mandatory Skills:

• Expert-level hands-on experience with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX).
• Strong understanding of Zero Trust, SASE, secure web gateway, cloud firewall, CASB, DLP, and traffic inspection concepts.
• Proven experience designing Zscaler architecture for large enterprise and global transformation programs.
• Ability to integrate Zscaler with IAM, endpoint, network, cloud, and SOC/security monitoring ecosystems.
• Experience preparing HLD/LLD, migration plans, implementation playbooks, test plans, and operational transition documents.
• Excellent customer-facing communication, stakeholder management, and technical presentation skills.

 Job Requirements:

• 10+ years of overall Cyber Security experience with architecture and consulting exposure.
• 5+ years of hands-on Zscaler architecture, design, deployment, and optimization experience.
• Experience leading global Zscaler or SASE transformation engagements.
• Strong knowledge of enterprise networking, cloud security, identity, and endpoint security integration.
• Ability to interact with executive stakeholders, customer security leadership, architects, and delivery teams.
• Experience in multi-vendor security environments and managed services transition.